Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          awhOFcPjEjtR/K2AbepspH6WB8oL5U3Kmy1hyWJqcLQ=
Subject key identifier:   F6:E5:7E:E0:45:54:5C:B1:B2:09:40:15:6C:74:CE:9E:64:FB:B8:ED
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       0194BAF252E22953493115753D25E75A4FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          0E27
Signing time:             Fri 31 Jan 2025 06:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:30 +0000
Files and hashes:         1: 3jkyEgeUwHuLrsjz6T_ObqcY74c.roa (hash: JoJ/5W4dG3D9w6kILiihWs6cJdsEqCFWaxmLM7gkMSI=)
                          2: 5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa (hash: zeVZxVXoVg6CA4xU6hMT88LFhpR/jzGOghHaqJNZWX0=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: habQsXyeuCCxjOoV4IXkHrH2e7VYxMPnkyC2liSzNMI=)
                          4: c_VdOA86HAho8DyTOmnwSwlTlAk.roa (hash: 850TFYirePJY29VuqkCG/JWWe8g21qbj4etquhKOEz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:52:e2:29:53:49:31:15:75:3d:25:e7:5a:4f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Jan 31 06:00:30 2025 GMT
            Not After : Feb  1 06:00:30 2025 GMT
        Subject: CN=f6e57ee045545cb1b20940156c74ce9e64fbb8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:04:95:0e:34:a3:3d:b3:d6:4d:2a:cc:56:
                    0e:e1:7a:50:cd:b9:ea:70:36:79:37:ce:36:62:bd:
                    5b:8f:1d:be:e2:d4:c4:7a:50:2b:b4:93:86:32:2e:
                    47:f8:f3:56:b2:79:c7:cc:c9:10:cb:67:5c:f9:60:
                    ba:57:f1:86:04:31:f9:df:c8:3d:b8:39:77:96:1c:
                    f1:5b:b1:d7:5b:28:d5:a5:8d:33:95:59:2f:b2:eb:
                    5a:6a:92:34:46:cf:e7:da:38:96:89:ff:99:5d:35:
                    f8:38:b6:3a:d2:ed:7b:e5:c9:ce:41:db:2d:ce:17:
                    fc:59:d7:89:e3:7e:63:a5:ec:ec:48:20:f3:1f:61:
                    72:b0:84:f4:04:46:74:5b:63:99:a3:93:a5:31:59:
                    f8:ee:36:44:b6:dd:ff:3a:4d:07:34:6d:01:b6:2b:
                    c0:f8:54:f8:26:5e:8c:fe:5f:1e:7b:c7:d3:72:a1:
                    37:6c:75:ca:4a:53:ce:71:de:21:81:6e:7b:41:eb:
                    95:0e:4f:9d:1b:d5:62:4b:4f:49:72:16:34:0f:ff:
                    21:d0:ab:e6:59:a0:b6:87:0d:c0:af:32:ca:40:3b:
                    e8:bf:cf:b6:07:6f:99:30:d7:d1:56:d1:7b:8f:35:
                    2a:94:99:ad:ee:c5:bd:1d:e3:b3:7d:20:24:33:ec:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:7E:E0:45:54:5C:B1:B2:09:40:15:6C:74:CE:9E:64:FB:B8:ED
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:b6:1d:3f:be:0d:80:86:a0:b1:8f:8f:50:21:5d:c3:90:
         a0:e5:95:d9:6f:09:62:69:9a:a0:30:f1:bb:6b:e1:39:57:93:
         6c:c6:ea:a8:60:eb:02:1f:ed:b5:4a:f5:4f:0f:db:49:fa:9f:
         8e:e3:af:ef:82:c1:f5:eb:27:cd:93:da:6a:73:ec:ea:b4:a2:
         c7:cb:75:f8:f6:92:63:d8:c4:b5:f5:4c:28:3f:f2:6d:5e:12:
         99:2c:29:3d:2f:25:98:37:c2:a1:f7:59:f8:a7:77:9c:28:0c:
         1a:48:6a:2c:3d:b1:44:66:e4:e8:99:dc:ae:43:18:77:23:0d:
         cc:a0:85:b7:0a:8d:b4:29:10:61:df:0e:f3:eb:4b:1d:df:cb:
         cc:c4:c3:07:99:b9:91:90:00:4c:25:31:1a:f9:6e:a6:fd:21:
         c0:51:12:35:09:9c:2a:85:95:eb:9e:1a:b2:c6:fb:f3:bc:d0:
         f7:ee:9f:9c:c8:ca:d8:b1:79:b1:1e:49:94:37:6b:4f:72:bd:
         a5:87:ca:8f:32:8d:21:48:27:b7:82:07:17:17:fc:2a:e1:8e:
         9a:f8:d6:72:55:4b:93:cb:04:ee:cd:7c:33:f0:52:ee:6c:d1:
         d9:77:2c:70:55:ee:39:b7:b5:57:80:d0:65:52:ac:e7:d9:45:
         af:f6:c8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68lLiKVNJMRV1PSXnWk+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy
ZDUxOWYwHhcNMjUwMTMxMDYwMDMwWhcNMjUwMjAxMDYwMDMwWjAzMTEwLwYDVQQD
EyhmNmU1N2VlMDQ1NTQ1Y2IxYjIwOTQwMTU2Yzc0Y2U5ZTY0ZmJiOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAEElQ40oz2z1k0qzFYO4XpQzbnq
cDZ5N842Yr1bjx2+4tTEelArtJOGMi5H+PNWsnnHzMkQy2dc+WC6V/GGBDH538g9
uDl3lhzxW7HXWyjVpY0zlVkvsutaapI0Rs/n2jiWif+ZXTX4OLY60u175cnOQdst
zhf8WdeJ435jpezsSCDzH2FysIT0BEZ0W2OZo5OlMVn47jZEtt3/Ok0HNG0BtivA
+FT4Jl6M/l8ee8fTcqE3bHXKSlPOcd4hgW57QeuVDk+dG9ViS09JchY0D/8h0Kvm
WaC2hw3ArzLKQDvov8+2B2+ZMNfRVtF7jzUqlJmt7sW9HeOzfSAkM+wIIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPblfuBFVFyxsglAFWx0zp5k+7jtMB8GA1UdIwQY
MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt
MWFhMjc3ZGYzNzY5LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5
LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIm2HT++
DYCGoLGPj1AhXcOQoOWV2W8JYmmaoDDxu2vhOVeTbMbqqGDrAh/ttUr1Tw/bSfqf
juOv74LB9esnzZPaanPs6rSix8t1+PaSY9jEtfVMKD/ybV4SmSwpPS8lmDfCofdZ
+Kd3nCgMGkhqLD2xRGbk6JncrkMYdyMNzKCFtwqNtCkQYd8O8+tLHd/LzMTDB5m5
kZAATCUxGvlupv0hwFESNQmcKoWV654assb787zQ9+6fnMjK2LF5sR5JlDdrT3K9
pYfKjzKNIUgnt4IHFxf8KuGOmvjWclVLk8sE7s18M/BS7mzR2XcscFXuObe1V4DQ
ZVKs59lFr/bIcA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:33 2025 by rpki-client on console-fra.rpki-client.org